check that user owns bin when setting visibility
Updating bin model to take username param
Padding req.session.name into setBinVisibility